Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/d3e393-d8e8-4906-9177-1e0b1f7ca6cf/1/fWeULOCqD9J6DNy3MTTe_cxhROE.mft
File: fWeULOCqD9J6DNy3MTTe_cxhROE.mft (raw, json)
Hash identifier: 99knyM8g74CVjiArCeCd3/WncnPKPAgxRTIXHssHMdA=
Subject key identifier: B6:79:2A:57:28:25:B0:48:1C:F6:26:62:ED:A7:06:1E:0A:3E:7E:2F
Authority key identifier: 7D:67:94:2C:E0:AA:0F:D2:7A:0C:DC:B7:31:34:DE:FD:CC:61:44:E1
Certificate issuer: /CN=7d67942ce0aa0fd27a0cdcb73134defdcc6144e1
Certificate serial: 01976FD0EB4CE483CA319830CE8822B7E782
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fWeULOCqD9J6DNy3MTTe_cxhROE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/d3e393-d8e8-4906-9177-1e0b1f7ca6cf/1/fWeULOCqD9J6DNy3MTTe_cxhROE.mft
Manifest number: 0583
Signing time: Sat 14 Jun 2025 19:00:52 +0000
Manifest this update: Sat 14 Jun 2025 19:00:52 +0000
Manifest next update: Sun 15 Jun 2025 19:00:52 +0000
Files and hashes: 1: fWeULOCqD9J6DNy3MTTe_cxhROE.crl (hash: UETDeUbHD9OVUDBWMC9ETp6uLpvIopovj+0CptoipK0=)
2: zA58kveqXgli4S_Gmvm71Z6gYvA.roa (hash: U7XAD6S0aMw4lkO5A8lwquVG5gdGFXidXMd3PA0M/Nw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/d3e393-d8e8-4906-9177-1e0b1f7ca6cf/1/fWeULOCqD9J6DNy3MTTe_cxhROE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/d3e393-d8e8-4906-9177-1e0b1f7ca6cf/1/fWeULOCqD9J6DNy3MTTe_cxhROE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fWeULOCqD9J6DNy3MTTe_cxhROE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:d0:eb:4c:e4:83:ca:31:98:30:ce:88:22:b7:e7:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d67942ce0aa0fd27a0cdcb73134defdcc6144e1
Validity
Not Before: Jun 14 19:00:52 2025 GMT
Not After : Jun 15 19:00:52 2025 GMT
Subject: CN=b6792a572825b0481cf62662eda7061e0a3e7e2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8e:fb:40:8a:83:27:6c:52:e2:f5:21:6e:23:
0e:51:2c:a0:fa:c9:04:04:5e:f1:dc:26:f7:ae:b4:
ea:8e:4f:ea:93:f4:b7:52:0b:d0:1e:da:78:29:38:
e7:d6:a5:4c:ab:cf:2d:c9:7e:b7:e8:5e:7a:29:94:
77:43:2b:4f:16:af:1e:fa:64:b8:75:a7:a8:80:47:
e0:5e:9f:d0:88:cf:be:f0:39:bc:f0:3b:0d:33:b4:
90:68:0f:58:d0:cc:c9:16:7b:b5:8f:f9:7d:f0:99:
bd:d9:35:50:f1:13:ce:89:6a:6e:f0:a1:95:10:5f:
2f:d6:d8:63:39:86:7d:74:e5:25:cd:64:4a:87:6a:
6c:2f:a4:81:1b:97:1b:ce:77:71:da:f0:82:5c:44:
12:e4:82:62:92:cd:03:ec:1d:93:a1:e9:fe:14:22:
3b:24:9d:b9:73:32:b7:53:fe:79:ed:fb:97:b9:b3:
18:7c:1c:da:56:0a:45:09:a3:de:03:c1:6b:6b:c8:
d9:0f:30:96:9b:a1:24:ad:92:ca:17:48:a3:9d:be:
ae:be:27:57:48:c5:a2:af:3c:1a:0a:1c:8f:c7:ce:
3f:1b:10:3f:5a:c7:e3:d4:1b:84:cc:ff:99:28:ed:
a8:c6:b9:96:d3:f4:5a:a5:eb:f0:5a:dd:77:ba:b0:
1e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:79:2A:57:28:25:B0:48:1C:F6:26:62:ED:A7:06:1E:0A:3E:7E:2F
X509v3 Authority Key Identifier:
keyid:7D:67:94:2C:E0:AA:0F:D2:7A:0C:DC:B7:31:34:DE:FD:CC:61:44:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fWeULOCqD9J6DNy3MTTe_cxhROE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d3e393-d8e8-4906-9177-1e0b1f7ca6cf/1/fWeULOCqD9J6DNy3MTTe_cxhROE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d3e393-d8e8-4906-9177-1e0b1f7ca6cf/1/fWeULOCqD9J6DNy3MTTe_cxhROE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:3c:af:27:39:08:e0:0c:0d:9f:83:fd:e5:cc:c8:18:1f:d7:
ce:0d:c5:0e:3e:da:47:01:2e:7d:75:44:53:32:88:39:57:f3:
b9:60:01:bf:65:f9:3d:ee:28:35:f7:eb:6a:4b:fb:7e:43:44:
ce:d7:41:dc:e3:e2:00:fe:d9:04:10:da:da:d0:4f:a6:81:b1:
0c:84:d2:56:7a:10:db:63:0a:18:d1:e9:23:cc:46:6d:8f:ef:
a1:d3:5f:a8:36:e7:d1:32:86:59:31:86:c9:f9:38:b6:98:b6:
37:5d:6d:f3:61:2e:76:cf:50:b5:c4:d9:32:82:30:b0:4d:4b:
91:6c:25:dd:b7:b7:8f:6e:aa:7d:72:ed:87:e3:88:3a:2b:ea:
a2:8c:da:5d:c5:01:01:5e:98:c6:df:d2:2a:7e:f0:8a:80:9b:
56:7a:6b:56:f0:0f:8c:06:fa:c7:26:6b:3a:54:6c:c7:9d:9a:
37:3f:1d:72:e9:ab:f0:96:00:c1:14:b3:1f:70:d0:01:3e:10:
23:22:8c:d8:23:a5:9f:8e:a5:95:5b:b2:67:43:e6:0f:6c:4d:
8a:5b:0e:65:46:14:27:a7:1e:ce:f1:b2:64:a1:6b:c0:9e:f7:
9d:4f:24:23:53:ea:6e:ed:ad:54:3b:b5:cc:36:de:36:0e:11:
66:3c:3c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:17:46 2025 by rpki-client